WolfCMS v0.8.3.1 allows XSS via an SVG file to /?/admin/plugin/file_manager/browse/.
References
Link | Resource |
---|---|
https://github.com/s-kustm | Third Party Advisory |
https://github.com/s-kustm/Subodh/blob/master/CVE-2018-18824.pdf | Exploit Third Party Advisory |
https://twitter.com/Subodhk62060242 | Third Party Advisory |
https://www.linkedin.com/in/subodh-kumar-8a00b1125/ | Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2019-04-25T19:50:27
Updated: 2019-04-25T19:50:27
Reserved: 2018-10-29T00:00:00
Link: CVE-2018-18824
JSON object: View
NVD Information
Status : Analyzed
Published: 2019-04-25T20:29:02.490
Modified: 2020-07-29T16:09:01.517
Link: CVE-2018-18824
JSON object: View
Redhat Information
No data.
CWE